railwayapp/railpack v0.41.0 on GitHub

Providers

PHP: we've added Symfony support to the PHP provider: Symfony apps are now detected automatically and get the public/ document root, production defaults (APP_ENV=prod, APP_DEBUG=0), and a startup script that runs Doctrine migrations and warms the production cache. Detection needs no configuration — if your composer.json requires symfony/framework-bundle, it just works — and you can set RAILPACK_SKIP_MIGRATIONS=true to skip migrations at startup. by @iloveitaly in #626

Updated mise from v2026.9.15 to v2026.10.8.

Java now defaults to Temurin: unprefixed Java versions (java@21, lts, latest) now install current Eclipse Temurin builds instead of the stale jdk.java.net OpenJDK builds, though existing mise.lock entries pinning OpenJDK may need mise lock --bump java to switch. (v2026.10.5)
Node downloads always GPG-verified: Node runtimes are now checked against their published GPG signature for every version, not just 2.x, so set node.gpg_verify = false if you install from a mirror without signatures. (v2026.10.5)
Untrusted configs hardened: mise.toml tool entries with inline options now require trust, closing a hole where an untrusted project could redirect a github: tool at an attacker host and leak GITHUB_TOKEN. (v2026.9.18)
Lockfile revision 3: new mise.lock files record packslip repository IDs so tools keep installing after a GitHub or GitLab repo rename, but older mise versions reject the new format, so upgrade everyone sharing the lockfile before running mise lock --upgrade. (v2026.9.16)

Full Changelog: v0.40.1...v0.41.0

Routine mise version maintenance with test snapshot and changelog updates by @iloveitaly.